IE6 ZoneMap & FEATURE_LOCALMACHINE_LOCKDOWN

[John]

Good Afternoon Group,

I have a 2003 Server SP1 with IE6. This server is configured as a terminal
server. There is a need for the security settings to be adjusted to get an
application that works with InternetExplorer. I need to enable the 'Allow
active content to run in files on My Computer' (Options/Advanced/Security).
Internet Explorer Enhanced Security is installed. Through the registry I
have enabled the Security_HKLM_only
(HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings)
option so IE will get its setting from HKLM. To achieve the enabling of
'Allow active content to run in files on My Computer' I have edited
HKLM\Software\Microsoft\Internet
Explorer\Main\Feature\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe=0. What I
am seeing is that this registry setting does not place a check mark next to
the 'Allow active content to run in files on My Computer' setting within IE.
Is there some other setting I need to do to get this working ?

Cheers

John

 

[PA Bear [MS MVP]]

[[Forwarded to Windows Server Security newsgroup via crosspost]]